Security Manager II - GRC

Tampa, FL, US 12 days ago Requisition ID: 1009 Salary Range: $145,000.00 To $160,000.00 Annually About the role We need someone who can hit the ground running. You will walk in on day one with real program ownership — existing audits in flight, vendor reviews in queue, and a team looking for direction. If you thrive in that environment, this is your role. Key Responsibilities Lead and mature the GRC program across security, privacy, and regulatory compliance functions — owning strategy, execution, and team performance. Drive SOC 2 Type II audit readiness and evidence collection end-to-end — including control mapping, auditor liaising, and remediation tracking. Own HIPAA Security Rule and Privacy Rule compliance programs, including risk analysis, workforce training, and BAA management. Lead HITRUST CSF assessment cycles — scoping, gap analysis, corrective action plans, and Validated Assessment preparation. Build and own the Third-Party Risk Management (TPRM) program — vendor onboarding, security reviews, ongoing monitoring, and risk acceptance workflows. Serve as the primary security contact for Sales and Customer Success — owning security questionnaires, customer trust reviews, and prospect-facing security documentation. Develop and maintain quarterly and annual risk assessments, risk register, and executive-level reporting for the VP of InfoSec. Own the full policy lifecycle — drafting, publishing, reviewing, and enforcing information security and privacy policies across the organization. Build the AI Risk Governance and Responsible AI framework as the organization expands the use of AI-powered products and internal tooling. Manage, mentor, and grow a team of 2–5 GRC analysts and junior compliance staff — setting priorities, removing blockers, and developing career paths. Partner with Engineering and DevOps on control implementation, evidence automation, and compliance-as-code initiatives. Skills and qualifications (mandatory) 8–10 years of progressive GRC, security compliance, or information security leadership experience in a Healthcare SaaS or regulated health‑tech environment. Demonstrable ownership of SOC 2 Type II audit cycles from scoping through report issuance — not just support participation. Deep working knowledge of HIPAA Security Rule, Privacy Rule, and Breach Notification requirements in the context of SaaS-delivered health applications. Hands‑on HITRUST CSF experience — gap assessments, corrective action plans, and Validated Assessment preparation. FedRAMP experience (Moderate or High baseline) Skills and qualifications (preferred) Proven ability to build and manage Third‑Party Risk Management programs — vendor questionnaires, security reviews, and ongoing monitoring. Experience translating complex security and compliance requirements into clear, actionable guidance for non‑technical business stakeholders. Prior people management experience — leading GRC analysts, coordinating cross‑functional compliance programs, and holding teams accountable to deadlines. Strong executive communication skills — experience presenting risk posture, compliance status, and program roadmaps to VP/C‑suite audiences. Familiarity with GRC platforms such as Vanta, Drata, Thoropass, or equivalent — ability to configure, maintain, and report from these tools. First 30 Days expectations Review and assess the current state of all active compliance programs — SOC 2, HIPAA, HITRUST — and identify immediate gaps or risks. Take ownership of any in‑flight audit activities, open corrective action plans, and pending vendor reviews. Meet with key internal stakeholders (Engineering, Legal, Sales, HR) to map compliance dependencies and establish working relationships. SIGHTVIEW SOFTWARE LLC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regards to age, color, race, religion, sex, gender identity, marital status, medical condition, national origin, sexual orientation, veteran, or disability status, or any other characteristic protected by applicable laws, regulations, and ordinances. Benefits/Perks may vary depending on the nature of your employment and the country where you work. #J-18808-Ljbffr